IBM Security Bulletin: Vulnerability in Mozilla NSS affects the IBM FlashSystem models 840 and 900

There is a vulnerability in Mozilla Network Security Services (NSS) to which the IBM® FlashSystem™ 840 and FlashSystem™ 900 are susceptible. An exploit of this vulnerability (CVE-2017-7502) could to cause a denial of service.

CVE(s): CVE-2017-7502

Affected product(s) and affected version(s):

FlashSystem 840 machine type and models (MTMs) affected include 9840-AE1 and 9843-AE1.

FlashSystem 900 MTMs affected include 9840-AE2 and 9843-AE2.

No supported code versions are affected
· VRMFs prior to 1.2.0.0 are not supported, but are affected

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2z2F3il
X-Force Database: http://ift.tt/2h8X71T

The post IBM Security Bulletin: Vulnerability in Mozilla NSS affects the IBM FlashSystem models 840 and 900 appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2z3l7Ma